Agents

Monitor-only machines

Remote commands are on by default: running scripts, installing software and updates, the terminal. A machine installed with --no-commands is only watched.

How to

Untick Allow remote commands in Add device. The line then ends with --no-commands (or -NoCommands on Windows). Or add it yourself:

curl -fsSL … /install.sh | sudo sh -s -- --token TOKEN --no-commands

What it means

• The setting is in the machine's own config. The server can't turn it back on: the agent refuses commands whatever the server asks.
• It still reports everything: metrics, inventory, software, pending updates, health, containers.
• CERMM says so before you try: the device's Run controls, software dialogs and batches show the machine as commands off and skip it.

Changing it later

Run the Add device line again on the machine, with or without --no-commands.